Hi, Unfortunately, while it did get rid of the context menus, it did not get rid of the items command bar.
However after reading the link you attached, I fired up procmon and found HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\CommandStore\shell\Windows.Share If I take ownership and rename that key, the menu item disappears. Now just need to work out how to automate this over all machines. Thanks On 7 August 2013 21:25, Aakash Shah <[email protected]> wrote: > If you want to just remove the ability for people to see/access “Share > With” from the UI, it appears that you can delete the following registry > keys:**** > > ** ** > > ; Share with**** > > [-HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\Sharing]**** > > > [-HKEY_CLASSES_ROOT\Directory\Background\shellex\ContextMenuHandlers\Sharing] > **** > > [-HKEY_CLASSES_ROOT\Directory\shellex\ContextMenuHandlers\Sharing]**** > > [-HKEY_CLASSES_ROOT\Drive\shellex\ContextMenuHandlers\Sharing]**** > > > [-HKEY_CLASSES_ROOT\LibraryFolder\background\shellex\ContextMenuHandlers\Sharing] > **** > > [-HKEY_CLASSES_ROOT\UserLibraryFolder\shellex\ContextMenuHandlers\Sharing] > **** > > ** ** > > Source: > http://www.sevenforums.com/customization/16714-context-menu-cleanup-time.html#post178160 > **** > > ** ** > > I did not test all of them, but I did test deleting * > HKCR\Directory\shellex\ContextMenuHandlers\Sharing* and it did > successfully remove the Share With context menu item from folders.**** > > ** ** > > However, I don’t know if this has any other adverse side effects (I’ve not > implemented this in a production environment).**** > > ** ** > > Note that there may be other areas where they can browse the domain, so > setting the AD results to show 0 results as you’ve already done may be a > good item to keep for you. However, I believe that this affects the > ability for a user to browse for printers too in case you need that ability. > **** > > ** ** > > -Aakash Shah**** > > ** ** > > *From:* [email protected] [mailto: > [email protected]] *On Behalf Of *Barrie Russell > *Sent:* Wednesday, August 7, 2013 1:04 PM > *To:* [email protected] > *Subject:* [NTSysADM] Remove Windows explorer command bar**** > > ** ** > > Hi Guys,**** > > **** > > Just going through a Pen Test at the moment and got pinned on this little > gem.**** > > **** > > I can't seem to find a way to remove the "Share With" button that appears > when you click on a folder.**** > > **** > > As a restricted user you can't actually share anything, it does however > pop up an AD search box which then allows you to browse all through the > directory structure. That is where I got hurt.**** > > **** > > Google has produced some results on manually modifying the contents of > some DLL's, but that is not really practical and may get over ridden at > anytime by patch/hotfix or service pack.**** > > **** > > As a mitigation I have used group policy to reduce the amount of AD search > results to 0, but if anyone has any out of the box ideas that can help it > would be greatly appreciated.**** > > **** > > Apart from this little gem, things have gone pretty well, just would like > to fix this one prior to the report being written so it shows as resolved > and not outstanding.**** > > **** > > Thanks**** > > Barrie**** > > **** > > **** >
